Votre question

analyse de Hijack this

Tags :
  • Internet Explorer
  • Sécurité
Dernière réponse : dans Sécurité et virus
2 Décembre 2006 10:01:06

Bonjour,

Je souhaiterais avoir un avis sur mon rapport d'Hijack This
merci de votre aide

Logfile of HijackThis v1.99.1
Scan saved at 09:34:35, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\WINDOWS\mHotkey.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\Program Files\BVRP Connection Manager\NomadSvr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iese...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0EEDB912-C5FA-486F-8334-57288578C627} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: DataViz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by14fd.bay14.hotmail.msn.com/resources/MsnPUpld....
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/fichiers/hardwaredetectio...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCDsrv.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MSSQL$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe" -sPINNACLESYS (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Connection Manager (Nomad) - Unknown owner - C:\Program Files\BVRP Connection Manager\NomadSvr.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - (no file)
O23 - Service: SQLAgent$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE" -i PINNACLESYS (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Autres pages sur : analyse hijack this

a b 8 Sécurité
2 Décembre 2006 12:17:31

Bonjour,

Ca me semble OK.
2 Décembre 2006 12:27:57

merci de votre aide j'ais un message "instansharedevice.msi" qui apparait à chaque démarage et je le suprime par 'alt ctrl sup' et fin de tache.

merci encore
Contenus similaires
a b 8 Sécurité
2 Décembre 2006 12:31:49

Analyse ce fichier sur VirusTotal puis poste le rapport.
2 Décembre 2006 13:09:33

je ne peu pas analyser ce fichier il y une fenettre qui me demande
"The feature are trying to use is on a CR.ROM or other removable disk that is not availabe"
Insert te "InstantShareDevices" disk and click OK ????
a b 8 Sécurité
2 Décembre 2006 13:12:14

Je ne pense pas que ce soit une infection.
Tu peux toujours faire ca :

Télécharge puis installe AVG Anti-Spyware (AVG AS)
Une fois AVG AS lancé, clique sur "Mise à jour"
Ferme le programme.
AIDE : Tuto sur Avg Antispyware (Malekal)

Redémarre en mode sans échec

Relance AVG AS puis choisis l'onglet "Analyse"
Puis l'onglet "Paramètres"
Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

/!\ Si un fichier est infecté en fin d'analyse /!\
Clique sur "Appliquer toutes les actions "

Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
Enregistre ce fichier texte sur ton bureau.

Redémarre normalement
Copie/Colle le rapport AVG AS ainsi qu'un rapport Hijackthis.
2 Décembre 2006 14:46:53

apres redemarage toujour presence de cette fenetre "InstantShareDevice"



5C80-0010-8010-0000-0004-7530-****

Windows XP 5.1
IA32
WinAspi: -
ahead WinASPI: File 'C:\Program Files\Nero\Nero 7\Core\Wnaspi32.dll': Ver=2.0.1.74, size=164112 bytes, created 02/11/2004 13:54:32

NT-SPTI used
Nero Version: 7.5.1.1
Internal Version: 7, 5, 1, 1
(Nero Express)
Recorder: <HL-DT-ST DVDRRW GWA-4164B>Version: 1.03 - HA 1 TA 0 - 7.5.1.1
Adapter driver: <IDE> HA 1
Drive buffer : 2048kB
Bus Type : default (0) -> ATAPI, detected: ?
CD-ROM: <HL-DT-ST DVDRRW GWA-4164B>Version: 1.03 - HA 1 TA 0 - 7.5.1.1
Adapter driver: <IDE> HA 1

=== Scsi-Device-Map ===
CdRomPeripheral : HL-DT-ST DVDRRW GWA-4164B nvata Port 0 ID 2 DMA: Off
DiskPeripheral : WDC WD2000JS-55NCB1 nvata Port 2 ID 0 DMA: Off

=== CDRom-Device-Map ===
HL-DT-ST DVDRRW GWA-4164B D: CDRom0
=======================

AutoRun : 1
Excluded drive IDs:
WriteBufferSize: 83886080 (0) Byte
BUFE : 0
Physical memory : 1023MB (1048048kB)
Free physical memory: 204MB (208932kB)
Memory in use : 80 %
Uncached PFiles: 0x0
Use Inquiry : 1
Global Bus Type: default (0)
Check supported media : Disabled (0)

23.11.2006
===== Disc-Copy over image - 1st step : Copy to image ...

21:55:07 #1 Text 0 File SCSIPassThrough.cpp, Line 39
SPTILockVolume - completed successfully for FCTL_LOCK_VOLUME

21:55:07 #2 Text 0 File ThreadedTransfer.cpp, Line 540
ReadBuffer-Pipe got 192KB of Memory

21:55:07 #3 Text 0 File Reader.cpp, Line 126
Reader running

21:55:07 #4 Text 0 File Writer.cpp, Line 123
Writer Image Recorder running

21:55:07 #5 Phase 48 File dlgbrnst.cpp, Line 1730
Analyzing disc

21:55:07 #6 CDCOPY -1 File CDCopy.cpp, Line 1916
The CD is copyrighted

21:55:13 #7 Text 0 File CDCopy.cpp, Line 2132
_Index0_ _______Index1_______ PostPause ___LastBlockOfTrack_
Track 1: 0 0 ( 0:02.00) 2837 2836 ( 0:39.61)
Track 2: 2837 2837 ( 0:39.62) 7512 7511 ( 1:42.11)
Track 3: 7512 7512 ( 1:42.12) 12305 12304 ( 2:46.04)
Track 4: 12305 12305 ( 2:46.05) 22400 22399 ( 5:00.49)
Track 5: 22400 22400 ( 5:00.50) 27880 27879 ( 6:13.54)
Track 6: 27880 27880 ( 6:13.55) 34742 34741 ( 7:45.16)
Track 7: 34742 34742 ( 7:45.17) 39610 39609 ( 8:50.09)
Track 8: 39610 39610 ( 8:50.10) 45865 45864 ( 10:13.39)
Track 9: 45865 45865 ( 10:13.40) 51360 51359 ( 11:26.59)
Track 10: 51360 51360 ( 11:26.60) 61925 61924 ( 13:47.49)
Track 11: 61925 61925 ( 13:47.50) 66957 66956 ( 14:54.56)
Track 12: 66957 66957 ( 14:54.57) 73325 73324 ( 16:19.49)
Track 13: 73325 73325 ( 16:19.50) 80197 80196 ( 17:51.21)
Track 14: 80197 80197 ( 17:51.22) 86500 86499 ( 19:15.24)
Track 15: 86500 86500 ( 19:15.25) 96310 96309 ( 21:26.09)
Track 16: 96310 96310 ( 21:26.10) 101580 101579 ( 22:36.29)
Track 17: 101580 101580 ( 22:36.30) 105720 105719 ( 23:31.44)
Track 18: 105720 105720 ( 23:31.45) 110737 110736 ( 24:38.36)
Track 19: 110737 110737 ( 24:38.37) 119415 119414 ( 26:34.14)
Track 20: 119415 119415 ( 26:34.15) 125302 125301 ( 27:52.51)
Track 21: 125302 125302 ( 27:52.52) 130895 130894 ( 29:07.19)
Track 22: 130895 130895 ( 29:07.20) 133635 133634 ( 29:43.59)
Track 23: 133635 133635 ( 29:43.60) 137937 137936 ( 30:41.11)
Track 24: 137937 137937 ( 30:41.12) 142065 142064 ( 31:36.14)
Track 25: 142065 142065 ( 31:36.15) 148807 148806 ( 33:06.06)
Track 26: 148807 148807 ( 33:06.07) 155272 155271 ( 34:32.21)
Track 27: 155272 155272 ( 34:32.22) 160732 160731 ( 35:45.06)
Track 28: 160732 160732 ( 35:45.07) 165197 165196 ( 36:44.46)
Track 29: 165197 165197 ( 36:44.47) 169162 169161 ( 37:37.36)
Track 30: 169162 169162 ( 37:37.37) 172877 172876 ( 38:27.01)

21:55:13 #8 Text 0 File CDCopy.cpp, Line 840
Copy options: copy on-the-fly: ON
read ISRC/MCN: OFF
use jitter correction: OFF
data options
ignore read error: ON write defekt blocks OFF
read raw data: OFF read r-w subchannel data: OFF
audio options
ignore read error: ON
read indexes: OFF read r-w subchannel data: OFF
source disc does not look like CD Extra
01. 0 - 2837 = 2837, audio (TRM_AUDIO_NOPRE, block size 2352)
02. 2837 - 7512 = 4675, audio (TRM_AUDIO_NOPRE, block size 2352)
03. 7512 - 12305 = 4793, audio (TRM_AUDIO_NOPRE, block size 2352)
04. 12305 - 22400 = 10095, audio (TRM_AUDIO_NOPRE, block size 2352)
05. 22400 - 27880 = 5480, audio (TRM_AUDIO_NOPRE, block size 2352)
06. 27880 - 34742 = 6862, audio (TRM_AUDIO_NOPRE, block size 2352)
07. 34742 - 39610 = 4868, audio (TRM_AUDIO_NOPRE, block size 2352)
08. 39610 - 45865 = 6255, audio (TRM_AUDIO_NOPRE, block size 2352)
09. 45865 - 51360 = 5495, audio (TRM_AUDIO_NOPRE, block size 2352)
10. 51360 - 61925 = 10565, audio (TRM_AUDIO_NOPRE, block size 2352)
11. 61925 - 66957 = 5032, audio (TRM_AUDIO_NOPRE, block size 2352)
12. 66957 - 73325 = 6368, audio (TRM_AUDIO_NOPRE, block size 2352)
13. 73325 - 80197 = 6872, audio (TRM_AUDIO_NOPRE, block size 2352)
14. 80197 - 86500 = 6303, audio (TRM_AUDIO_NOPRE, block size 2352)
15. 86500 - 96310 = 9810, audio (TRM_AUDIO_NOPRE, block size 2352)
16. 96310 - 101580 = 5270, audio (TRM_AUDIO_NOPRE, block size 2352)
17. 101580 - 105720 = 4140, audio (TRM_AUDIO_NOPRE, block size 2352)
18. 105720 - 110737 = 5017, audio (TRM_AUDIO_NOPRE, block size 2352)
19. 110737 - 119415 = 8678, audio (TRM_AUDIO_NOPRE, block size 2352)
20. 119415 - 125302 = 5887, audio (TRM_AUDIO_NOPRE, block size 2352)
21. 125302 - 130895 = 5593, audio (TRM_AUDIO_NOPRE, block size 2352)
22. 130895 - 133635 = 2740, audio (TRM_AUDIO_NOPRE, block size 2352)
23. 133635 - 137937 = 4302, audio (TRM_AUDIO_NOPRE, block size 2352)
24. 137937 - 142065 = 4128, audio (TRM_AUDIO_NOPRE, block size 2352)
25. 142065 - 148807 = 6742, audio (TRM_AUDIO_NOPRE, block size 2352)
26. 148807 - 155272 = 6465, audio (TRM_AUDIO_NOPRE, block size 2352)
27. 155272 - 160732 = 5460, audio (TRM_AUDIO_NOPRE, block size 2352)
28. 160732 - 165197 = 4465, audio (TRM_AUDIO_NOPRE, block size 2352)
29. 165197 - 169162 = 3965, audio (TRM_AUDIO_NOPRE, block size 2352)
30. 169162 - 172877 = 3715, audio (TRM_AUDIO_NOPRE, block size 2352)

21:58:00 #9 Text 0 File Burncd.cpp, Line 3443
Turn on Disc-At-Once, using CD-R/RW media

21:58:01 #10 Text 0 File DlgWaitCD.cpp, Line 300
Last possible write address on media: 445499 ( 99:01.74)
Last address to be written: 172876 ( 38:27.01)

21:58:01 #11 Text 0 File DlgWaitCD.cpp, Line 312
Write in overburning mode: NO (enabled: CD DVD)

21:58:01 #12 Text 0 File DlgWaitCD.cpp, Line 484
>>> Protocol of DlgWaitCD activities: <<<
=========================================

21:58:01 #13 Text 0 File ThreadedTransferInterface.cpp, Line 863
Setup items (after recorder preparation)
0: TRM_AUDIO_NOPRE (1 - Audio)
2 indices, index0 (150) not provided
original disc pos #0 + 2837 (2837) = #2837/0:37.62
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 2837 blocks [Image Recorder]
1: TRM_AUDIO_NOPRE (2 - Audio)
2 indices, index0 (0) provided
original disc pos #2837 + 4675 (4675) = #7512/1:40.12
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4675 blocks [Image Recorder]
2: TRM_AUDIO_NOPRE (3 - Audio)
2 indices, index0 (0) provided
original disc pos #7512 + 4793 (4793) = #12305/2:44.5
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4793 blocks [Image Recorder]
3: TRM_AUDIO_NOPRE (4 - Audio)
2 indices, index0 (0) provided
original disc pos #12305 + 10095 (10095) = #22400/4:58.50
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 10095 blocks [Image Recorder]
4: TRM_AUDIO_NOPRE (5 - Audio)
2 indices, index0 (0) provided
original disc pos #22400 + 5480 (5480) = #27880/6:11.55
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5480 blocks [Image Recorder]
5: TRM_AUDIO_NOPRE (6 - Audio)
2 indices, index0 (0) provided
original disc pos #27880 + 6862 (6862) = #34742/7:43.17
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6862 blocks [Image Recorder]
6: TRM_AUDIO_NOPRE (7 - Audio)
2 indices, index0 (0) provided
original disc pos #34742 + 4868 (4868) = #39610/8:48.10
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4868 blocks [Image Recorder]
7: TRM_AUDIO_NOPRE (8 - Audio)
2 indices, index0 (0) provided
original disc pos #39610 + 6255 (6255) = #45865/10:11.40
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6255 blocks [Image Recorder]
8: TRM_AUDIO_NOPRE (9 - Audio)
2 indices, index0 (0) provided
original disc pos #45865 + 5495 (5495) = #51360/11:24.60
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5495 blocks [Image Recorder]
9: TRM_AUDIO_NOPRE (10 - Audio)
2 indices, index0 (0) provided
original disc pos #51360 + 10565 (10565) = #61925/13:45.50
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 10565 blocks [Image Recorder]
10: TRM_AUDIO_NOPRE (11 - Audio)
2 indices, index0 (0) provided
original disc pos #61925 + 5032 (5032) = #66957/14:52.57
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5032 blocks [Image Recorder]
11: TRM_AUDIO_NOPRE (12 - Audio)
2 indices, index0 (0) provided
original disc pos #66957 + 6368 (6368) = #73325/16:17.50
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6368 blocks [Image Recorder]
12: TRM_AUDIO_NOPRE (13 - Audio)
2 indices, index0 (0) provided
original disc pos #73325 + 6872 (6872) = #80197/17:49.22
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6872 blocks [Image Recorder]
13: TRM_AUDIO_NOPRE (14 - Audio)
2 indices, index0 (0) provided
original disc pos #80197 + 6303 (6303) = #86500/19:13.25
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6303 blocks [Image Recorder]
14: TRM_AUDIO_NOPRE (15 - Audio)
2 indices, index0 (0) provided
original disc pos #86500 + 9810 (9810) = #96310/21:24.10
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 9810 blocks [Image Recorder]
15: TRM_AUDIO_NOPRE (16 - Audio)
2 indices, index0 (0) provided
original disc pos #96310 + 5270 (5270) = #101580/22:34.30
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5270 blocks [Image Recorder]
16: TRM_AUDIO_NOPRE (17 - Audio)
2 indices, index0 (0) provided
original disc pos #101580 + 4140 (4140) = #105720/23:29.45
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4140 blocks [Image Recorder]
17: TRM_AUDIO_NOPRE (18 - Audio)
2 indices, index0 (0) provided
original disc pos #105720 + 5017 (5017) = #110737/24:36.37
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5017 blocks [Image Recorder]
18: TRM_AUDIO_NOPRE (19 - Audio)
2 indices, index0 (0) provided
original disc pos #110737 + 8678 (8678) = #119415/26:32.15
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 8678 blocks [Image Recorder]
19: TRM_AUDIO_NOPRE (20 - Audio)
2 indices, index0 (0) provided
original disc pos #119415 + 5887 (5887) = #125302/27:50.52
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5887 blocks [Image Recorder]
20: TRM_AUDIO_NOPRE (21 - Audio)
2 indices, index0 (0) provided
original disc pos #125302 + 5593 (5593) = #130895/29:5.20
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5593 blocks [Image Recorder]
21: TRM_AUDIO_NOPRE (22 - Audio)
2 indices, index0 (0) provided
original disc pos #130895 + 2740 (2740) = #133635/29:41.60
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 2740 blocks [Image Recorder]
22: TRM_AUDIO_NOPRE (23 - Audio)
2 indices, index0 (0) provided
original disc pos #133635 + 4302 (4302) = #137937/30:39.12
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4302 blocks [Image Recorder]
23: TRM_AUDIO_NOPRE (24 - Audio)
2 indices, index0 (0) provided
original disc pos #137937 + 4128 (4128) = #142065/31:34.15
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4128 blocks [Image Recorder]
24: TRM_AUDIO_NOPRE (25 - Audio)
2 indices, index0 (0) provided
original disc pos #142065 + 6742 (6742) = #148807/33:4.7
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6742 blocks [Image Recorder]
25: TRM_AUDIO_NOPRE (26 - Audio)
2 indices, index0 (0) provided
original disc pos #148807 + 6465 (6465) = #155272/34:30.22
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 6465 blocks [Image Recorder]
26: TRM_AUDIO_NOPRE (27 - Audio)
2 indices, index0 (0) provided
original disc pos #155272 + 5460 (5460) = #160732/35:43.7
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 5460 blocks [Image Recorder]
27: TRM_AUDIO_NOPRE (28 - Audio)
2 indices, index0 (0) provided
original disc pos #160732 + 4465 (4465) = #165197/36:42.47
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 4465 blocks [Image Recorder]
28: TRM_AUDIO_NOPRE (29 - Audio)
2 indices, index0 (0) provided
original disc pos #165197 + 3965 (3965) = #169162/37:35.37
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 3965 blocks [Image Recorder]
29: TRM_AUDIO_NOPRE (30 - Audio)
2 indices, index0 (0) provided
original disc pos #169162 + 3715 (3715) = #172877/38:25.2
relocatable, disc pos for caching/writing not required/not required, no patch infos
-> TRM_AUDIO_NOPRE, 2352, config 0, wanted index0 0 blocks, length 3715 blocks [Image Recorder]
--------------------------------------------------------------

21:58:01 #14 Text 0 File ThreadedTransferInterface.cpp, Line 1079
Prepare recorder [Image Recorder] for write in CUE-sheet-DAO
DAO infos:
==========
MCN: ""
TOCType: 0x00; Session Closed, disc fixated
Tracks 1 to 30: Idx 0 Idx 1 Next Trk
1: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 0 352800 7025424, ISRC ""
2: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 7025424 7025424 18021024, ISRC ""
3: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 18021024 18021024 29294160, ISRC ""
4: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 29294160 29294160 53037600, ISRC ""
5: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 53037600 53037600 65926560, ISRC ""
6: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 65926560 65926560 82065984, ISRC ""
7: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 82065984 82065984 93515520, ISRC ""
8: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 93515520 93515520 108227280, ISRC ""
9: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 108227280 108227280 121151520, ISRC ""
10: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 121151520 121151520 146000400, ISRC ""
11: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 146000400 146000400 157835664, ISRC ""
12: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 157835664 157835664 172813200, ISRC ""
13: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 172813200 172813200 188976144, ISRC ""
14: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 188976144 188976144 203800800, ISRC ""
15: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 203800800 203800800 226873920, ISRC ""
16: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 226873920 226873920 239268960, ISRC ""
17: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 239268960 239268960 249006240, ISRC ""
18: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 249006240 249006240 260806224, ISRC ""
19: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 260806224 260806224 281216880, ISRC ""
20: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 281216880 281216880 295063104, ISRC ""
21: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 295063104 295063104 308217840, ISRC ""
22: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 308217840 308217840 314662320, ISRC ""
23: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 314662320 314662320 324780624, ISRC ""
24: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 324780624 324780624 334489680, ISRC ""
25: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 334489680 334489680 350346864, ISRC ""
26: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 350346864 350346864 365552544, ISRC ""
27: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 365552544 365552544 378394464, ISRC ""
28: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 378394464 378394464 388896144, ISRC ""
29: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 388896144 388896144 398221824, ISRC ""
30: TRM_AUDIO_NOPRE, 2352/0x00, FilePos 398221824 398221824 406959504, ISRC ""
DAO layout:
===========
___Start_|____Track_|_Idx_|_CtrlAdr_|_____Size_|______NWA_|_RecDep__________
-150 | lead-in | 0 | 0x01 | 0 | 0 | 0x00
-150 | 1 | 0 | 0x01 | 2837 | 2687 | 0x00
0 | 1 | 1 | 0x01 | 2837 | 2837 | 0x00
2837 | 2 | 0 | 0x01 | 4675 | 7512 | 0x00
2837 | 2 | 1 | 0x01 | 4675 | 7512 | 0x00
7512 | 3 | 0 | 0x01 | 4793 | 12305 | 0x00
7512 | 3 | 1 | 0x01 | 4793 | 12305 | 0x00
12305 | 4 | 0 | 0x01 | 10095 | 22400 | 0x00
12305 | 4 | 1 | 0x01 | 10095 | 22400 | 0x00
22400 | 5 | 0 | 0x01 | 5480 | 27880 | 0x00
22400 | 5 | 1 | 0x01 | 5480 | 27880 | 0x00
27880 | 6 | 0 | 0x01 | 6862 | 34742 | 0x00
27880 | 6 | 1 | 0x01 | 6862 | 34742 | 0x00
34742 | 7 | 0 | 0x01 | 4868 | 39610 | 0x00
34742 | 7 | 1 | 0x01 | 4868 | 39610 | 0x00
39610 | 8 | 0 | 0x01 | 6255 | 45865 | 0x00
39610 | 8 | 1 | 0x01 | 6255 | 45865 | 0x00
45865 | 9 | 0 | 0x01 | 5495 | 51360 | 0x00
45865 | 9 | 1 | 0x01 | 5495 | 51360 | 0x00
51360 | 10 | 0 | 0x01 | 10565 | 61925 | 0x00
51360 | 10 | 1 | 0x01 | 10565 | 61925 | 0x00
61925 | 11 | 0 | 0x01 | 5032 | 66957 | 0x00
61925 | 11 | 1 | 0x01 | 5032 | 66957 | 0x00
66957 | 12 | 0 | 0x01 | 6368 | 73325 | 0x00
66957 | 12 | 1 | 0x01 | 6368 | 73325 | 0x00
73325 | 13 | 0 | 0x01 | 6872 | 80197 | 0x00
73325 | 13 | 1 | 0x01 | 6872 | 80197 | 0x00
80197 | 14 | 0 | 0x01 | 6303 | 86500 | 0x00
80197 | 14 | 1 | 0x01 | 6303 | 86500 | 0x00
86500 | 15 | 0 | 0x01 | 9810 | 96310 | 0x00
86500 | 15 | 1 | 0x01 | 9810 | 96310 | 0x00
96310 | 16 | 0 | 0x01 | 5270 | 101580 | 0x00
96310 | 16 | 1 | 0x01 | 5270 | 101580 | 0x00
101580 | 17 | 0 | 0x01 | 4140 | 105720 | 0x00
101580 | 17 | 1 | 0x01 | 4140 | 105720 | 0x00
105720 | 18 | 0 | 0x01 | 5017 | 110737 | 0x00
105720 | 18 | 1 | 0x01 | 5017 | 110737 | 0x00
110737 | 19 | 0 | 0x01 | 8678 | 119415 | 0x00
110737 | 19 | 1 | 0x01 | 8678 | 119415 | 0x00
119415 | 20 | 0 | 0x01 | 5887 | 125302 | 0x00
119415 | 20 | 1 | 0x01 | 5887 | 125302 | 0x00
125302 | 21 | 0 | 0x01 | 5593 | 130895 | 0x00
125302 | 21 | 1 | 0x01 | 5593 | 130895 | 0x00
130895 | 22 | 0 | 0x01 | 2740 | 133635 | 0x00
130895 | 22 | 1 | 0x01 | 2740 | 133635 | 0x00
133635 | 23 | 0 | 0x01 | 4302 | 137937 | 0x00
133635 | 23 | 1 | 0x01 | 4302 | 137937 | 0x00
137937 | 24 | 0 | 0x01 | 4128 | 142065 | 0x00
137937 | 24 | 1 | 0x01 | 4128 | 142065 | 0x00
142065 | 25 | 0 | 0x01 | 6742 | 148807 | 0x00
142065 | 25 | 1 | 0x01 | 6742 | 148807 | 0x00
148807 | 26 | 0 | 0x01 | 6465 | 155272 | 0x00
148807 | 26 | 1 | 0x01 | 6465 | 155272 | 0x00
155272 | 27 | 0 | 0x01 | 5460 | 160732 | 0x00
155272 | 27 | 1 | 0x01 | 5460 | 160732 | 0x00
160732 | 28 | 0 | 0x01 | 4465 | 165197 | 0x00
160732 | 28 | 1 | 0x01 | 4465 | 165197 | 0x00
165197 | 29 | 0 | 0x01 | 3965 | 169162 | 0x00
165197 | 29 | 1 | 0x01 | 3965 | 169162 | 0x00
169162 | 30 | 0 | 0x01 | 3715 | 172877 | 0x00
169162 | 30 | 1 | 0x01 | 3715 | 172877 | 0x00
172877 | lead-out | 1 | 0x01 | 0 | 0 | 0x00

21:58:01 #15 Phase 120 File dlgbrnst.cpp, Line 1730
Creating the image for burning

21:58:01 #16 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 0 (relocatable, no disc pos, no patch infos, orig at #0): write at #0

21:58:01 #17 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 1 (relocatable, no disc pos, no patch infos, orig at #2837): write at #2837

21:58:01 #18 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 2 (relocatable, no disc pos, no patch infos, orig at #7512): write at #7512

21:58:01 #19 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 3 (relocatable, no disc pos, no patch infos, orig at #12305): write at #12305

21:58:01 #20 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 4 (relocatable, no disc pos, no patch infos, orig at #22400): write at #22400

21:58:01 #21 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 5 (relocatable, no disc pos, no patch infos, orig at #27880): write at #27880

21:58:01 #22 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 6 (relocatable, no disc pos, no patch infos, orig at #34742): write at #34742

21:58:01 #23 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 7 (relocatable, no disc pos, no patch infos, orig at #39610): write at #39610

21:58:01 #24 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 8 (relocatable, no disc pos, no patch infos, orig at #45865): write at #45865

21:58:01 #25 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 9 (relocatable, no disc pos, no patch infos, orig at #51360): write at #51360

21:58:01 #26 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 10 (relocatable, no disc pos, no patch infos, orig at #61925): write at #61925

21:58:01 #27 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 11 (relocatable, no disc pos, no patch infos, orig at #66957): write at #66957

21:58:01 #28 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 12 (relocatable, no disc pos, no patch infos, orig at #73325): write at #73325

21:58:01 #29 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 13 (relocatable, no disc pos, no patch infos, orig at #80197): write at #80197

21:58:01 #30 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 14 (relocatable, no disc pos, no patch infos, orig at #86500): write at #86500

21:58:01 #31 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 15 (relocatable, no disc pos, no patch infos, orig at #96310): write at #96310

21:58:01 #32 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 16 (relocatable, no disc pos, no patch infos, orig at #101580): write at #101580

21:58:01 #33 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 17 (relocatable, no disc pos, no patch infos, orig at #105720): write at #105720

21:58:01 #34 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 18 (relocatable, no disc pos, no patch infos, orig at #110737): write at #110737

21:58:01 #35 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 19 (relocatable, no disc pos, no patch infos, orig at #119415): write at #119415

21:58:01 #36 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 20 (relocatable, no disc pos, no patch infos, orig at #125302): write at #125302

21:58:01 #37 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 21 (relocatable, no disc pos, no patch infos, orig at #130895): write at #130895

21:58:01 #38 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 22 (relocatable, no disc pos, no patch infos, orig at #133635): write at #133635

21:58:01 #39 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 23 (relocatable, no disc pos, no patch infos, orig at #137937): write at #137937

21:58:01 #40 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 24 (relocatable, no disc pos, no patch infos, orig at #142065): write at #142065

21:58:01 #41 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 25 (relocatable, no disc pos, no patch infos, orig at #148807): write at #148807

21:58:01 #42 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 26 (relocatable, no disc pos, no patch infos, orig at #155272): write at #155272

21:58:01 #43 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 27 (relocatable, no disc pos, no patch infos, orig at #160732): write at #160732

21:58:01 #44 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 28 (relocatable, no disc pos, no patch infos, orig at #165197): write at #165197

21:58:01 #45 Text 0 File ThreadedTransferInterface.cpp, Line 2746
Verifying disc position of item 29 (relocatable, no disc pos, no patch infos, orig at #169162): write at #169162

21:59:41 #46 Text 0 File WriterStatus.cpp, Line 116
<Image Recorder> start writing Lead-Out at LBA 172877 (2A34Dh), length 0 blocks

21:59:41 #47 Text 0 File ThreadedTransfer.cpp, Line 229
all writers idle, stopping conversion

21:59:41 #48 Phase 121 File dlgbrnst.cpp, Line 1730
Creating Image completed successfully



===== Disc-Copy over image - 2nd step : Burn the image ...

21:59:50 #1 Text 0 File Burncd.cpp, Line 3129
HL-DT-ST DVDRRW GWA-4164B
Protection contre les ruptures activés

21:59:50 #2 Text 0 File ThreadedTransfer.cpp, Line 540
ReadBuffer-Pipe got 81920KB of Memory

21:59:50 #3 Text 0 File Reader.cpp, Line 126
Reader running

21:59:50 #4 IMAGEGEN -10 File ImageGen.cpp, Line 366
Image was written as DAO.
DAOI:
MediaCatalogNumber = ''
TocType = 0x00
Finalized = 1
First/Last Track = 1 / 30
1: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 0, Index1FilePos = 352800, NextTrackFilePos = 7025424
2: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 7025424, Index1FilePos = 7025424, NextTrackFilePos = 18021024
3: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 18021024, Index1FilePos = 18021024, NextTrackFilePos = 29294160
4: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 29294160, Index1FilePos = 29294160, NextTrackFilePos = 53037600
5: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 53037600, Index1FilePos = 53037600, NextTrackFilePos = 65926560
6: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 65926560, Index1FilePos = 65926560, NextTrackFilePos = 82065984
7: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 82065984, Index1FilePos = 82065984, NextTrackFilePos = 93515520
8: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 93515520, Index1FilePos = 93515520, NextTrackFilePos = 108227280
9: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 108227280, Index1FilePos = 108227280, NextTrackFilePos = 121151520
10: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 121151520, Index1FilePos = 121151520, NextTrackFilePos = 146000400
11: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 146000400, Index1FilePos = 146000400, NextTrackFilePos = 157835664
12: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 157835664, Index1FilePos = 157835664, NextTrackFilePos = 172813200
13: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 172813200, Index1FilePos = 172813200, NextTrackFilePos = 188976144
14: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 188976144, Index1FilePos = 188976144, NextTrackFilePos = 203800800
15: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 203800800, Index1FilePos = 203800800, NextTrackFilePos = 226873920
16: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 226873920, Index1FilePos = 226873920, NextTrackFilePos = 239268960
17: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 239268960, Index1FilePos = 239268960, NextTrackFilePos = 249006240
18: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 249006240, Index1FilePos = 249006240, NextTrackFilePos = 260806224
19: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 260806224, Index1FilePos = 260806224, NextTrackFilePos = 281216880
20: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 281216880, Index1FilePos = 281216880, NextTrackFilePos = 295063104
21: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 295063104, Index1FilePos = 295063104, NextTrackFilePos = 308217840
22: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 308217840, Index1FilePos = 308217840, NextTrackFilePos = 314662320
23: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 314662320, Index1FilePos = 314662320, NextTrackFilePos = 324780624
24: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 324780624, Index1FilePos = 324780624, NextTrackFilePos = 334489680
25: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 334489680, Index1FilePos = 334489680, NextTrackFilePos = 350346864
26: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 350346864, Index1FilePos = 350346864, NextTrackFilePos = 365552544
27: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 365552544, Index1FilePos = 365552544, NextTrackFilePos = 378394464
28: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 378394464, Index1FilePos = 378394464, NextTrackFilePos = 388896144
29: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 388896144, Index1FilePos = 388896144, NextTrackFilePos = 398221824
30: ISRC = ''
Blocksize = 2352
TrackMode = 'TRM_AUDIO_NOPRE'
TrackConfig = 0x00
First/Last Index = 0 / 1
Index0FilePos = 398221824, Index1FilePos = 398221824, NextTrackFilePos = 406959504
CUES:
0: Ctrl=0x01 Trk= 0 (0x00) Index=00 Start=954437:08.46 ( -150) RecDep=0x00
1: Ctrl=0x00 Trk= 0 (0x00) Index=57 Start=3801:08.52 ( 17105152) RecDep=0x80
2: Ctrl=0x01 Trk= 10 (0x10) Index=00 Start=11:24.60 ( 51360) RecDep=0x00
3: Ctrl=0x00 Trk= 1 (0x01) Index=39 Start=4034:06.22 ( 18153472) RecDep=0x45 [open track] [empty/reserved]
4: Ctrl=0x01 Trk= 19 (0x19) Index=01 Start=24:36.37 ( 110737) RecDep=0x00
5: Ctrl=0x00 Trk= 2 (0x02) Index=20 Start=4252:36.68 ( 19136768) RecDep=0xD1 [empty/reserved]
MTYP: Mediumtype = CD (old format) (0x1)
Image file name: <C:\Documents and Settings\JANICK\Mes documents\TempImage.nrg>

21:59:50 #5 Text 0 File Burncd.cpp, Line 3443
Turn on Disc-At-Once, using CD-R/RW media

22:02:08 #6 Phase 40 File dlgbrnst.cpp, Line 1730
Aborted by user

22:02:08 #7 Text 0 File DlgWaitCD.cpp, Line 312
Write in overburning mode: NO (enabled: CD DVD)

22:02:08 #8 Text 0 File DlgWaitCD.cpp, Line 2851
Recorder: HL-DT-ST DVDRRW GWA-4164B
Medium not present

22:02:08 #9 Text 0 File DlgWaitCD.cpp, Line 484
>>> Protocol of DlgWaitCD activities: <<<
=========================================
Insert empty disc to write to.
(Medium in drive: Inconnu. Medium required by compilation: CD-R/RW.)


Existing drivers:
File 'Drivers\PXHELP20.SYS': Ver=2.03.32a, size=20640 bytes, created 27/07/2006 18:28:33 (Prassi/Veritas driver for win 2K)
File 'Drivers\InCDfs.SYS': Ver=5, 5, 0, 5, size=102912 bytes, created 25/07/2006 15:51:56 (InCD4 driver for win NT/2K/XP)
File 'Drivers\InCDpass.SYS': Ver=5, 5, 0, 5, size=31488 bytes, created 25/07/2006 15:52:46 (InCD4 driver for win NT/2K/XP)
File 'Drivers\InCDrec.SYS': Ver=5, 5, 0, 5, size=10624 bytes, created 25/07/2006 15:52:08 (InCD4 driver for win NT/2K/XP)

Registry Keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\AllocateCDROMs : 0 (Security Option)


Logfile of HijackThis v1.99.1
Scan saved at 14:40:35, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\netdde.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\WINDOWS\mHotkey.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\BVRP Connection Manager\NomadSvr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\DvzCommon\DvzMsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iese...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0EEDB912-C5FA-486F-8334-57288578C627} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: DataViz Messenger.lnk = C:\WINDOWS\DvzCommon\DvzMsgr.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by14fd.bay14.hotmail.msn.com/resources/MsnPUpld....
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Contro...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/fichiers/hardwaredetectio...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\Nero 7\InCD\InCDsrv.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MSSQL$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe" -sPINNACLESYS (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Connection Manager (Nomad) - Unknown owner - C:\Program Files\BVRP Connection Manager\NomadSvr.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SiS WirelessLan Service (SiSWLSvc) - Unknown owner - (no file)
O23 - Service: SQLAgent$PINNACLESYS - Unknown owner - C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE" -i PINNACLESYS (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe




a b 8 Sécurité
2 Décembre 2006 14:56:43

Le rapport AVG ?
2 Décembre 2006 14:59:30

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:27:00 02/12/2006

+ Résultat de l'analyse:



C:\Documents and Settings\JANICK\Cookies\janick@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@qksrv[2].txt -> TrackingCookie.Qksrv : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.


Fin du rapport

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:27:00 02/12/2006

+ Résultat de l'analyse:



C:\Documents and Settings\JANICK\Cookies\janick@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@qksrv[2].txt -> TrackingCookie.Qksrv : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\JANICK\Cookies\janick@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.


Fin du rapport

oups
a b 8 Sécurité
2 Décembre 2006 15:01:25

C'est clean apparemment.
2 Décembre 2006 15:05:29

merci pour tous

RESOLU
Tom's guide dans le monde
  • Allemagne
  • Italie
  • Irlande
  • Royaume Uni
  • Etats Unis
Suivre Tom's Guide
Inscrivez-vous à la Newsletter
  • ajouter à twitter
  • ajouter à facebook
  • ajouter un flux RSS